localzuk

Pack updated to 1.3.1.

This server is now offline. World download available on request.

How do you all handle user authentication on shared iPads? We've introduced a more modern wifi system, so have a bit more flexibility with how things run now, and are looking at forcing authentication on all devices. With 1:1 devices its easy - 802.1x with radius accounting to our smoothwall. Chromebooks are also easy - they have to log in. But shared iPads? How do you handle this? 802.1x would be too cumbersome, especially for our youngest children. Do you use a captive portal? Or something else?

Announcing the next EduGeek Modded Minecraft server Direwolf20 1.20 Server address: mc.edugeek.net Dynmap address: http://mc.edugeek.net:8123 This is a 1.20 Forge modded Minecraft pack. You can download it via the FTB App Current pack version: 1.10.0 As always, to be whitelisted on the server, please visit your Profile on the site and add you Minecraft username to the field there. The server updates the whitelist every 30 minutes. Up to date information is always available via the Discord channel.

Thanks @ibpalle. Only issue is lack of spare interfaces. Will have to dig out some SFP modules and use one of those!

We currently have a fairly basic Smoothwall routing setup on our pair of appliances and need to make some changes for our new network setup. Specifically, at the moment, 0.0.0.0/0 is routed by our core switch to an interface on our smoothwall box, 10.10.0.1. This is set up in Smoothwall as a basic interface. No vlans etc... I need to add a VLAN with gateway IP 10.99.0.1 to that same interface but if I go to Add new interface, it doesn't allow me to select the above as a parent interface. So, my question is - do I have to delete the IP from the interface, which will make the interface available as a parent interface, and re-add it as a VLAN? And add the new VLAN as a tagged VLAN as well?

The difference between the 2 is that dist-upgrade will install new dependencies and remove old ones if needed for a new version of something. You'd see the difference with new kernels IIRC. When you run apt upgrade you'll often see "The following packages have been kept back" listed - these are things that it can't install as it would involve installing new stuff and/or removing old stuff. Its basically a more thorough upgrade process.

Setting it up on a Linux VM is quite easy. Basically, install Ubuntu Server - the install process is straightforward. Then follow these: https://help.ui.com/hc/en-us/articles/220066768-Updating-and-Installing-Self-Hosted-UniFi-Network-Servers-Linux- Copy paste a bunch of commands and it does it for you. Then periodically run "sudo apt update; sudo apt dist-upgrade" to get updates for the OS and all installed packages.

Other option is to run a Linux VM with it in. That's what we do.

Regarding updating people - we use a system to do this. Policies are reviewed yearly/2 yearly. Updates then get added to the system and all staff are notified automatically that the policy has changed and that they need to check it and confirm they've read it on the system. (We use iAm Compliant for this). So far, it has made managing polices much simpler for the Trust.

I have to agree with @Roberto a little. Ping testing is fairly limited, as in most cases of things being "down" in my experience, they still respond to pings, but the services running on them are offline. So, a more robust solution like Zabbix, Nagios or The Dude is needed. I imagine a ping monitor would be OK for monitoring if a connection is up or down though - I use them for that on our network (if one of our sites stops responding to ping, it indicates something is up), but even then I also run bandwidth tests as well, as the line may be up but running like a snail.

Delaying send is a client side only function, not Exchange-side.

It is inadvisable to run this way. Modern guidance is to split it up. https://www.ncsc.gov.uk/guidance/systems-administration-architectures

We use a multi-faceted admin setup here. The IT team has 2 accounts each, their daily use one, and a domain admin one. The domain admin passwords only work for server related tasks and cannot be used to log into client machines at all. We then have LAPS in place, which gives each client PC its own unique local admin password.

This has several aspects. First lets hit the data protection part - this should be covered by your Data Protection Policy. Any services used that collect data should have been checked and a DPIA done. As filtering and monitoring are required by law, your lawful basis is legal obligation. As part of this, you must only collect the data necessary to comply with the law. That is specified in our Prevent duties (so, we need to analyse every page someone goes to, and compare it to the list of banned sites per Prevent, IWF etc...), and then per our KCSIE duties (as expanded via the guidance here - https://saferinternet.org.uk/guide-and-resource/teachers-and-school-staff/appropriate-filtering-and-monitoring). Concerns about companies selling data is covered by GDPR and your DPIA. If your data sharing agreement with such a company does not allow it, then the company is legally not allowed to sell that data. If they do, the company can be sued, and prosecuted. Next, you have to look at the issue of using a personal device. Your ICT Acceptable Use Policy (potentially with a specific part for BYOD stuff) should cover this. If they agree to that AUP, then they agree to the way you require filtering to be done. If they do not agree, then they do not get to connect their personal device to your network. Lastly, your policies must provide detail on how you filter and monitor. They must reflect actual practise, and not what you wish it to be. It is for the school to determine the extent of their filtering/monitoring. E.g. Do BYOD devices continue to be monitored out of school? If no, specify this in your policies and AUP. Make it very clear and simple.

I don't think there's a way around this beyond creating your own script to run that uses GAM.

I am looking for a WEEE collection company that operates in Somerset, that offers wheelie bins to store things in. I have tried one national company, and they have let me down with failing to collect since my request on Sept 1st. So, I'm looking for an alternative. Anyone got a reliable WEEE collection company that operates in Somerset, preferably free, and provides bins?

Welcome @sephiroph!

When I asked about their SSO product (which includes the various login options), they said it wasn't currently being offered and they were looking at their product offerings.

That's odd. If checks are happening like this, I've not noticed them causing any slow-downs on our setup.

Happy with my Samsung S21 Ultra 5G tbh. Got it "refurbished" at half its retail price about 6 months after launch. Will likely not be until next year before I consider replacing it again! They last an easy 3 years now.

Happy Birthday @ZeroHour! Hope you've had an enjoyable day.

One thing to look at is integrating your sign in between the 2 with SSO, and making sure everything syncs up, so you don't need to know multiple account details/manage different passwords @discoveranother.

Looks like I'm not going to be able to make it in the end due to an unmovable hospital appt.

My dad has about 20 Ryobi tools and loves them.